CVE-2024-6300

June 25, 2024, 6:50 p.m.

CVSS Score

3.7 / 10

Product(s) Impacted

Conduit

Description

Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction

Weaknesses

CWE-459
Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

CWE ID: 459

Date

Published: June 25, 2024, 1:15 p.m.

Last Modified: June 25, 2024, 6:50 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@gitlab.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Base Score
3.7
Exploitability Score
2.2
Impact Score
1.4
Base Severity
LOW
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References